
1, AS-80 AS-81 15 Dec hi Storing of Cryptographic Devices and Materials 

1. It is believed advisable that a project be initiated to be undertaken by 
CSGAS-83 concerning future methods of storing cryptographic devices and materials 
by low echelon units. 

2. Considering such devices as the MX-519, 508 and 507, wherein weight and 
' size are the dominant factors, it is necessary to revise our present 'security 

regulations as to the association of documents and devices, or to revise our 
method of storage. It is a certainty that no such device similar to the Chest 
Cft-76 can be provided for low echelon units* The Air Force considers that the 
Chest Cft-76 does not possess sufficient weight to prevent its being carried away 
manually. To lighten this safe would be a step in the wrong direction. 

3. Consideration should be given to the inclusion of reserve rotors and 
documents within the outer carrying case of the device, with a method of quick 
and thorough destruction. Also to be considered is the provision of a light- 
weight inflammable safe, with a suitable lock provided with a quick and thorough 
means of destruction, wherein the necessary amount of cryptographic material 
might be stored. This of course would not provide actual physical security, yet 
would insure a certain degree of privacy. It is thought necessary that aimed 
guards supply the factor necessary for physical security in low echelon devices* 

iu If present plans are successful for constructing cryptographic equip- 
ments so that they are self destroying, it should not be necessary tb-sprovide 
safes for these devices in low echelon units. 

5. Consideration might also be .given to the removal of the cryptographic 
unit of the MX-519 with storage in the magnesium safe. 

6. Considerable thought will be necessary as to the most feasible and prac- 
tical method consistent with the requirements for tactical use, as well as our 
own security policy. 

7. This project should be undertaken at once as it is vitally necessary 
that some plan be adopted prior to procurement of any future equipments. 



/s/ William Brann 
/t/ WILLIAM BRANN 

Chief, Technical Staff 
Security Division 
Extension 388 
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2. AS-&1 AS-83 27 Sep lib Storing of Cryptographic Devices and Materials (Cant'd) 

X. Thera an too fond— ntal objectives to bo naebod by our physical se- 
curity regulations and by tbs sate rials w lssua to provide this security* They 
are i 






a* Protection against forcible eeisura such as the over-running of a 
cryptooenter by enaay troops. 

*■ ■ " 1 sd-®'"' 

b. Protection against clandestine seisure far a brief period of ;tlse, 

permitting enemy agents to examine equipment, copy airing diagrams, key lists, 
etc. This letter protection is probably core necessary than the first, sine* sno- 
cassful espionage of the type described trill usually not be discovered. 

2* Xt can be generally stated that contem p lat e d issue of cipher equipment 
is also divisible into two classes i issue to tactical, sere or less mobile units 
and issue to adniniatrative, higher echsloA, sore artless “fixed® organisations* 








3* Roughly the division by echelon and division of physical security ob- 
jectives »atch. Protection against espionage can generally be said to be the 
paramount consideration in the higher headquarters, protection against loss through 
violent action of prims Importance in the loner echelons. 

\ It. To a certain degree, also, different protective measures exist to take 
ears of the different objectives. Secure storage space is a defense against 
clandestine coeiproiaiscj a rapid means of total destruction of equipment is the 
logical defense against compromise by capture* 

5. Unfortunately the divisions into two are not neat and well defined. The 
lower echelon unit still requires secure storage as well as rapid means of destruc- 
tion. Reserve rotors and key lists, instructional documents, et el must be car- 
ried around. Sven though these were made of the same self-destructible material 
as the basic equipment, they cannot be stored in the equipment itself. And the 
loeer wits are not free of the dangers of espionage. Equipment destined pri- 
marily for high echelon use will also have to be employed in lover echelons if past 
experience is any criterion. The IS $19 is already an example of this. And, in 
future wars it is conceivable that “fixed" headquarters may be separated by enemy 
territory, perhaps even isolated. It will be necessary to transport cipher equip- 
ment to such places under dangerous conditions with increased chances of loss* 

Thus, provision of the proper storage facilities, though of prime importance, is 
not in itself enough but must be supplemented by the sans self-dea tructible fea- 
ture as must bo incorporated into the lover echelon devices* 




6. Thera has been s mors or Isos traditional physical security "requirement* 
of separate storage for various items of cryptographic material* Xt is considered 
that, for the purposes of storage, this requirement no longer need apply. If all 
Vthe equipment is self destructible, end if storage space is secure, • there is no 
treason why all material cannot bo handled together* The similar hesitancy to put 
nail eggs in one basket in the ease, of shipping should continue, however. 



7. Xt eaa be concluded, then, that all cipher equipment regardless of where 
t's to bo used, trill require both secure storage and rapid destruction means* Xt 
there fora recom men ded that the following program be adeptedi ' 
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2. AS-Sl AS-B3 27 5sp lid Storing of Cryptographic Devices and Kateriale (toot’d) 

a. All equipment, cipher components, rotors, key lists, etc,, will be 
cade of self destructible material without regard to its contemplated issue. (An 
exception to this provision can be made if an item of equipment is of such a nature 
as to positively preclude its use in low echelons or its shipment under conditions 
of subjection to capture.) 

b. A email, lightweight, self-dec true title safe will be developed for 
issue to low echelon units. The aat'e will be usea for storage of reserve material, 
rotors, documents, etc. Cryptographic units of machines themselves may also be 
stored In the safes, when such units arc detachable. 

c. In addition to the above, am.ed guards will be required. This is con- 
sidered necessary for two reasons. 

(1) To permit a time delay for igniting the equipment and the safe. 

(2) To prevent capture by enemy spy activity of the safe which will 
be light In weight, and portable. It is assumed that the normal 
cryptographic complement will be able to fulfill this require- 
ment without the use of especially assigned guards. 

d. At the higher echelons, heavy secure safes will be provided. (The 
CH-76 or an improvement on the CB-76, should meet this requirement.) storage 
therein of cryptographic material. Including cipher units when detachable, will be 
mandatory. Since these safes will not be self-destructible it may be necessary to 
provide sane sort of an incendiary to ignite the equipment inside, all of which 
will be self destructible. 

e. Current minis ue physical security requirements for fixed installations 
will remain in force. 



Kwnt c. iiusiif* 

Chief, Methods Branch 
jaactensicc 261 
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